DNSSEC Analyzer - zsoltsandor.me

Domain Name:

Time: 2019-12-15 13:51:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for zsoltsandor.me

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 18630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191231000000 20191210000000 20326 . M6PHO6VOOLVi9f31412BD96l/dWG8WOE+R6Q+KYMr4aJpS/hTZjjs6EDa249B2cjO7QzSD+qxWNT s7enqC1DsEAjeVm0epe3h6TFVBjX76R0MIqYC3+LjgGjyQnpish6mPApIx0ZC8mxewn0GCvC9Gqk 9S7s7IDD8FQWosXQRChqF9M7qkG1NuKvgPvqgpAk3naii0Eajx8N3XiPo8EwVS3yWOct4wcY8B1s fZjvL7mLDAiggGouyxt5PGm9TdnG7eioZPM1LyX1YgDV4/qUKmp7BHhsVKh/nQaR46yxbcpiRz6R nADB991g/+3bgY8dSACfUI0aBFsRT0DHHnMfpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to j.root-servers.net for zsoltsandor.me/A
	Received 723 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (723 bytes) ;; HEADER SECTION ;; id = 59208 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS c0.nic.me. me. 172800 IN NS a0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS a2.nic.me. me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . YoQUjSbGPOD8RHEGPqYCMdes7AAbfmrtGJIpYQwRjelPiKG7Hv5SBkvIQBFWenoiegRUls7ixjVs cjw2yUFfQqAn0bXdaiXie40+ZkYmHmWZA67D2CKwqCVhb7AlfJzh0M3677/PTGTf9wgeGcNSYjx2 qUjI3h6SH/w8T9H823MOcIv4+MwZcQOc9BiFtvjYy9QVyk4PzbDTuAzJM2LCNgAwtHWRnnlm/K0X +/YMMUdQ4N7QIERgoZWmglswbwmgu9j+2zPZvwMSuaXzjbLUspLWccr7tJ9wV4smeG9AHSxZjGuh f7O8k47BqVIwNrvyRL6jJ28plx5LjngiCqg+MA== ) ;; ADDITIONAL SECTION (11 records) c0.nic.me. 172800 IN A 199.253.61.1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 a0.nic.me. 172800 IN A 199.253.59.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 b2.nic.me. 172800 IN A 199.249.127.1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 b0.nic.me. 172800 IN A 199.253.60.1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 a2.nic.me. 172800 IN A 199.249.119.1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for me/DNSKEY
	Received 711 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (711 bytes) ;; HEADER SECTION ;; id = 43502 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . YoQUjSbGPOD8RHEGPqYCMdes7AAbfmrtGJIpYQwRjelPiKG7Hv5SBkvIQBFWenoiegRUls7ixjVs cjw2yUFfQqAn0bXdaiXie40+ZkYmHmWZA67D2CKwqCVhb7AlfJzh0M3677/PTGTf9wgeGcNSYjx2 qUjI3h6SH/w8T9H823MOcIv4+MwZcQOc9BiFtvjYy9QVyk4PzbDTuAzJM2LCNgAwtHWRnnlm/K0X +/YMMUdQ4N7QIERgoZWmglswbwmgu9j+2zPZvwMSuaXzjbLUspLWccr7tJ9wV4smeG9AHSxZjGuh f7O8k47BqVIwNrvyRL6jJ28plx5LjngiCqg+MA== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone me

	Checking DS between . and me
	Query to b.root-servers.net for me/DS
	Received 402 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (402 bytes) ;; HEADER SECTION ;; id = 11768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DS ;; ANSWER SECTION (3 records) me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . YoQUjSbGPOD8RHEGPqYCMdes7AAbfmrtGJIpYQwRjelPiKG7Hv5SBkvIQBFWenoiegRUls7ixjVs cjw2yUFfQqAn0bXdaiXie40+ZkYmHmWZA67D2CKwqCVhb7AlfJzh0M3677/PTGTf9wgeGcNSYjx2 qUjI3h6SH/w8T9H823MOcIv4+MwZcQOc9BiFtvjYy9QVyk4PzbDTuAzJM2LCNgAwtHWRnnlm/K0X +/YMMUdQ4N7QIERgoZWmglswbwmgu9j+2zPZvwMSuaXzjbLUspLWccr7tJ9wV4smeG9AHSxZjGuh f7O8k47BqVIwNrvyRL6jJ28plx5LjngiCqg+MA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for me in the . zone
	DS=2569/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2569/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`me. 86400 IN RRSIG ( DS 8 1 86400 20191228050000 20191215040000 22545 . YoQUjSbGPOD8RHEGPqYCMdes7AAbfmrtGJIpYQwRjelPiKG7Hv5SBkvIQBFWenoiegRUls7ixjVs cjw2yUFfQqAn0bXdaiXie40+ZkYmHmWZA67D2CKwqCVhb7AlfJzh0M3677/PTGTf9wgeGcNSYjx2 qUjI3h6SH/w8T9H823MOcIv4+MwZcQOc9BiFtvjYy9QVyk4PzbDTuAzJM2LCNgAwtHWRnnlm/K0X +/YMMUdQ4N7QIERgoZWmglswbwmgu9j+2zPZvwMSuaXzjbLUspLWccr7tJ9wV4smeG9AHSxZjGuh f7O8k47BqVIwNrvyRL6jJ28plx5LjngiCqg+MA== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=2569/SHA-1 is now in the chain-of-trust
	`me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a`
	`me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 )`
	Query to a0.nic.me for me/DNSKEY
	Error querying a0.nic.me/2001:500:53:0:0:0:0:1 for me/DNSKEY: 'IPv6 transport disabled'
	Received 1621 bytes from 199.253.59.1
	;; Answer received from 199.253.59.1 (1621 bytes) ;; HEADER SECTION ;; id = 15012 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (7 records) me. 900 IN DNSKEY ( 256 3 7 AwEAAdNWO4GZHauGij6ILscFikSAiGf86D4NhAddLARGhTwoSHLO4mYeefsmGoOUL4ilCQB3lC7K 57Z4YhKruyq8VkQiLrdM61ya96LtzJC/8HRtGG2JPonzl1sdfzD+5OjzmerAbUifRsS0AB6DIYHU RyV9ciy2RzASBZ/3f8dLl4e7 ) ; Key ID = 22892 me. 900 IN DNSKEY ( 256 3 7 AwEAAdDW3gaC6ok3XT8RFDc/Sx4le4j05MT7p77Wyh8bfAdAFDGbIdUJ0A7spBelvUKWqKZ6CGmo 7pN075/zhChv+0JdI6VGGuR35BeJL0TSUKioXJHaSKG9wdSSR3QyZMeSLxYtNoLP5wOJJUesmJwk xF5V/mjn1WSSuMLZY/rmtpAH ) ; Key ID = 37367 me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569 me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233 me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 2569 me. MkQIJ4PlmxZaAV+tZBLi6ZKVBGb60Z6JMPY15wmEdjHPgYR9gIOyD5hqfGCcG6TEtfQbt0x6iM7/ GLRHnfBGcL24hYgYrL5bpnxhAO6z8FBLWujRl6jNhZn/2xjSVRqYTRjaKD9eNxpyqpZU0BJEkmUe h7zPeqW+vBBdm6ipNdG4IRp8InEX69lja6ygUNeQKy2sznRjBsuq5kL2G3yGprvw+Gg2KEMZuLvW ZjXNh3jt7OcZP5SjAW4G1WVovHFr//kMdqrvWI/Yki02ClHsM8SUq0QFE9+GeaqGDHKjivLqQlt2 k2eVS+lz7LyfzfYVjg99OHrOyWu0QU0eKUUPPQ== ) me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 37367 me. Orx0zbn/t9eUcn0pFKIqlfs0/+vuUnjQRrWUwkBDTGMgYQpOtMaz0yaGNHPCEM1RDOA7NPt64Kr3 7kM2o9J8txc1xpiliooZKdIIrNIy+rPLbCW8icp6I91htSJCxe0P12eLJpupZ/9OBpjiRLKELqQh OOOzjhhmmfmAA1BVUcI= ) me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 53233 me. hwY6sczu8G8Yrmlr6Lr720V2E0eRqsjAHKooQCJRcGARKIRt6oGI1nDGB1Tzbspzg7yzHpb9+4Th vI3qlSq9Si5kRPAdxAdU73+ZAi9H6z8sBe1fuzomS+q6FC/5fzw6YrCCxlra7Zootsv87fvSzIvY YdNswSzOttDgN+tGaDUYVN+UxWSDyoMaaVZ18D9jd6HH6d5ovZeHAc0YcCVn5cXgAd78tw6KGwdJ 5P55p1zYSi9sRUs5J6/HZvANlwROUmFmSwlT0ssrJcDRvvlB4XXSOafwcrRyvo7FQjZuT3GN0HWj q1P2kFxJrNNbqRtvXmE1ZZsJew+r+Ux3Nn3CEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for me
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAdNWO4GZHauGij6ILscFikSAiGf86D4NhAddLARGhTwoSHLO4mYeefsmGoOUL4ilCQB3lC7K 57Z4YhKruyq8VkQiLrdM61ya96LtzJC/8HRtGG2JPonzl1sdfzD+5OjzmerAbUifRsS0AB6DIYHU RyV9ciy2RzASBZ/3f8dLl4e7 ) ; Key ID = 22892`
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAdDW3gaC6ok3XT8RFDc/Sx4le4j05MT7p77Wyh8bfAdAFDGbIdUJ0A7spBelvUKWqKZ6CGmo 7pN075/zhChv+0JdI6VGGuR35BeJL0TSUKioXJHaSKG9wdSSR3QyZMeSLxYtNoLP5wOJJUesmJwk xF5V/mjn1WSSuMLZY/rmtpAH ) ; Key ID = 37367`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233`
	DNSKEY=2569/SEP is now in the chain-of-trust
	DS=2569/SHA-1 verifies DNSKEY=2569/SEP
	DS=2569/SHA-256 verifies DNSKEY=2569/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 2569 me. MkQIJ4PlmxZaAV+tZBLi6ZKVBGb60Z6JMPY15wmEdjHPgYR9gIOyD5hqfGCcG6TEtfQbt0x6iM7/ GLRHnfBGcL24hYgYrL5bpnxhAO6z8FBLWujRl6jNhZn/2xjSVRqYTRjaKD9eNxpyqpZU0BJEkmUe h7zPeqW+vBBdm6ipNdG4IRp8InEX69lja6ygUNeQKy2sznRjBsuq5kL2G3yGprvw+Gg2KEMZuLvW ZjXNh3jt7OcZP5SjAW4G1WVovHFr//kMdqrvWI/Yki02ClHsM8SUq0QFE9+GeaqGDHKjivLqQlt2 k2eVS+lz7LyfzfYVjg99OHrOyWu0QU0eKUUPPQ== )`
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 37367 me. Orx0zbn/t9eUcn0pFKIqlfs0/+vuUnjQRrWUwkBDTGMgYQpOtMaz0yaGNHPCEM1RDOA7NPt64Kr3 7kM2o9J8txc1xpiliooZKdIIrNIy+rPLbCW8icp6I91htSJCxe0P12eLJpupZ/9OBpjiRLKELqQh OOOzjhhmmfmAA1BVUcI= )`
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20191230151822 20191209141822 53233 me. hwY6sczu8G8Yrmlr6Lr720V2E0eRqsjAHKooQCJRcGARKIRt6oGI1nDGB1Tzbspzg7yzHpb9+4Th vI3qlSq9Si5kRPAdxAdU73+ZAi9H6z8sBe1fuzomS+q6FC/5fzw6YrCCxlra7Zootsv87fvSzIvY YdNswSzOttDgN+tGaDUYVN+UxWSDyoMaaVZ18D9jd6HH6d5ovZeHAc0YcCVn5cXgAd78tw6KGwdJ 5P55p1zYSi9sRUs5J6/HZvANlwROUmFmSwlT0ssrJcDRvvlB4XXSOafwcrRyvo7FQjZuT3GN0HWj q1P2kFxJrNNbqRtvXmE1ZZsJew+r+Ux3Nn3CEg== )`
	RRSIG=2569 and DNSKEY=2569/SEP verifies the DNSKEY RRset
	RRSIG=37367 and DNSKEY=37367 verifies the DNSKEY RRset
	RRSIG=53233 and DNSKEY=53233/SEP verifies the DNSKEY RRset
	DNSKEY=22892 is now in the chain-of-trust
	DNSKEY=37367 is now in the chain-of-trust
	DNSKEY=53233/SEP is now in the chain-of-trust
	Query to c0.nic.me for zsoltsandor.me/A
	Error querying c0.nic.me/2001:500:55:0:0:0:0:1 for zsoltsandor.me/A: 'IPv6 transport disabled'
	Received 308 bytes from 199.253.61.1
	;; Answer received from 199.253.61.1 (308 bytes) ;; HEADER SECTION ;; id = 27816 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 86400 IN NS walt.ns.cloudflare.com. zsoltsandor.me. 86400 IN NS beth.ns.cloudflare.com. zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20191230151822 20191209141822 37367 me. avQS0QGwUOl6UxQn1sdUQrd/ZCw5lshKtoSa7jPS2aaiTWEIcOoobE4lriwNsJWMLcAVYFuDzfwm GSzh5fDS149lIuMu9+8LxcP9IBc2iIyL0Xc2udswlG7YVnbJUaBbmPllnynX0mMwP1s3uh0Cbfb7 s1+ys7Z0U6XGlETBdrQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b2.nic.me for zsoltsandor.me/DNSKEY
	Received 308 bytes from 199.249.127.1
	;; Answer received from 199.249.127.1 (308 bytes) ;; HEADER SECTION ;; id = 64602 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 86400 IN NS beth.ns.cloudflare.com. zsoltsandor.me. 86400 IN NS walt.ns.cloudflare.com. zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20191230151822 20191209141822 37367 me. avQS0QGwUOl6UxQn1sdUQrd/ZCw5lshKtoSa7jPS2aaiTWEIcOoobE4lriwNsJWMLcAVYFuDzfwm GSzh5fDS149lIuMu9+8LxcP9IBc2iIyL0Xc2udswlG7YVnbJUaBbmPllnynX0mMwP1s3uh0Cbfb7 s1+ys7Z0U6XGlETBdrQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone zsoltsandor.me

zsoltsandor.me

	Checking DS between me and zsoltsandor.me
	Query to a2.nic.me for zsoltsandor.me/DS
	Received 253 bytes from 199.249.119.1
	;; Answer received from 199.249.119.1 (253 bytes) ;; HEADER SECTION ;; id = 63962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DS ;; ANSWER SECTION (2 records) zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20191230151822 20191209141822 37367 me. avQS0QGwUOl6UxQn1sdUQrd/ZCw5lshKtoSa7jPS2aaiTWEIcOoobE4lriwNsJWMLcAVYFuDzfwm GSzh5fDS149lIuMu9+8LxcP9IBc2iIyL0Xc2udswlG7YVnbJUaBbmPllnynX0mMwP1s3uh0Cbfb7 s1+ys7Z0U6XGlETBdrQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for zsoltsandor.me in the me zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20191230151822 20191209141822 37367 me. avQS0QGwUOl6UxQn1sdUQrd/ZCw5lshKtoSa7jPS2aaiTWEIcOoobE4lriwNsJWMLcAVYFuDzfwm GSzh5fDS149lIuMu9+8LxcP9IBc2iIyL0Xc2udswlG7YVnbJUaBbmPllnynX0mMwP1s3uh0Cbfb7 s1+ys7Z0U6XGlETBdrQ= )`
	RRSIG=37367 and DNSKEY=37367 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 )`
	Query to walt.ns.cloudflare.com for zsoltsandor.me/DNSKEY
	Received 313 bytes from 173.245.59.148
	;; Answer received from 173.245.59.148 (313 bytes) ;; HEADER SECTION ;; id = 16074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (3 records) zsoltsandor.me. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 zsoltsandor.me. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 zsoltsandor.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200106205225 20191107205225 2371 zsoltsandor.me. 0/Gg/MfWfXizbsY6NZ1BVHyfnVP2zy5Gdf+iBnBUEB8L+3AAl3rAUPg3OoTlNgJXgbptC2vmFu3j 3d7iNGuKaw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for zsoltsandor.me
	`zsoltsandor.me. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`zsoltsandor.me. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`zsoltsandor.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200106205225 20191107205225 2371 zsoltsandor.me. 0/Gg/MfWfXizbsY6NZ1BVHyfnVP2zy5Gdf+iBnBUEB8L+3AAl3rAUPg3OoTlNgJXgbptC2vmFu3j 3d7iNGuKaw== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to beth.ns.cloudflare.com for zsoltsandor.me/A
	Received 169 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (169 bytes) ;; HEADER SECTION ;; id = 61614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (2 records) zsoltsandor.me. 20 IN A 104.248.60.43 zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20191216145124 20191214125124 34505 zsoltsandor.me. /1FgquXVEz3OSaYy+gvCxKi61mNXnbh9BZSg9cEMMYcpz8Mdr+J6vCmvDbnNUp76i9R2+4dSZazJ OyvHdQqvoA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	zsoltsandor.me is authoritative for zsoltsandor.me
	Found RRSIG signed by zsoltsandor.me zone
	Query to walt.ns.cloudflare.com for zsoltsandor.me/SOA
	Error querying walt.ns.cloudflare.com/2606:4700:58:0:0:0:adf5:3b94 for zsoltsandor.me/SOA: 'IPv6 transport disabled'
	Received 215 bytes from 173.245.59.148
	;; Answer received from 173.245.59.148 (215 bytes) ;; HEADER SECTION ;; id = 43834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 3600 IN SOA ( beth.ns.cloudflare.com. dns.cloudflare.com. 2032741854 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) zsoltsandor.me. 3600 IN RRSIG ( SOA 13 2 3600 20191216145124 20191214125124 34505 zsoltsandor.me. TQeGa1RPry9GxisiiFs8JBR6HjxlA6veyLPiaVUeBvy2M/Qv7v4yREW2Ns5fQcDyNC5HaMQ1kvIW 7EVFwa2ObQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to beth.ns.cloudflare.com for zsoltsandor.me/SOA
	Error querying beth.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a67 for zsoltsandor.me/SOA: 'IPv6 transport disabled'
	Error querying beth.ns.cloudflare.com/2606:4700:50:0:0:0:adf5:3a67 for zsoltsandor.me/SOA: 'IPv6 transport disabled'
	Received 215 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (215 bytes) ;; HEADER SECTION ;; id = 21557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 3600 IN SOA ( beth.ns.cloudflare.com. dns.cloudflare.com. 2032741854 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) zsoltsandor.me. 3600 IN RRSIG ( SOA 13 2 3600 20191216145124 20191214125124 34505 zsoltsandor.me. KAOjs/vH+zhWxPpS5YHpRW0CVGWnkCW9ZVHYGsxwiWCsCBfdjI0QcSwx23YIx9wIrE7FrWzq9VB0 XAkM51EA7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to beth.ns.cloudflare.com for zsoltsandor.me/A
	Error querying beth.ns.cloudflare.com/2606:4700:50:0:0:0:adf5:3a67 for zsoltsandor.me/A: 'IPv6 transport disabled'
	Error querying beth.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a67 for zsoltsandor.me/A: 'IPv6 transport disabled'
	Received 169 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (169 bytes) ;; HEADER SECTION ;; id = 43085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (2 records) zsoltsandor.me. 20 IN A 104.248.63.231 zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20191216145124 20191214125124 34505 zsoltsandor.me. tLtJ6m6ouJ3nZndAo7jwz/Plh2jR4xZb8ySmdtGQsfKLJfhBfYMAp58ZKGieEK1Hwf8Afzr7iyWI v6z0taMcfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	zsoltsandor.me A RR has value 104.248.63.231
	Found 1 RRSIGs over A RRset
	`zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20191216145124 20191214125124 34505 zsoltsandor.me. tLtJ6m6ouJ3nZndAo7jwz/Plh2jR4xZb8ySmdtGQsfKLJfhBfYMAp58ZKGieEK1Hwf8Afzr7iyWI v6z0taMcfQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test zsoltsandor.me at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: